Application security is about adding extra layers of protection. One easy win is to add a Content Security Policy (CSP) to your web application’s headers.